Domain 1: General Security Concepts
Chapter 1, Compare and contrast various types of security controls, gives an overview of different categories (technical, managerial, operational, physical) and types (preventive, deterrent, detective, corrective, compensating, directive) of security controls.
Chapter 2, Summarize fundamental security concepts, introduces key security concepts like CIA, non-repudiation, AAA, gap analysis, zero trust, physical security, and deception and disruption technology.
Chapter 3, Explain the importance of change management processes and the impact to security, discusses the significance of change management in security, covering business processes, technical implications, documentation, and version control.
Chapter 4, Explain the importance of using appropriate cryptographic solutions, details the use of cryptographic solutions like PKI, encryption levels, tools, obfuscation, hashing, digital signatures, and certificates.